c85b5ed28f12128a7d036e53a4ed27a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c85b5ed28f12128a7d036e53a4ed27a8_JaffaCakes118
Size

1.7MB
MD5

c85b5ed28f12128a7d036e53a4ed27a8
SHA1

a7010272165333afd9d063cdb0620b9e1aafd7d5
SHA256

dde86c76bfd3fa1996036c4bc727c032a63ed010071141b2718040c8bf3f747a
SHA512

703961e9cbad37cda1b51269946c7a65dac922225d77a7e021bfd5b9f8641128906a68c40d85152fb8810b6e018e92fad7757a9b166caab244622cd2a0094ee8
SSDEEP

49152:yvYVlHtIuRAp5aX0RhjqwwI/uHy4iNiCCa:aEFRy5Q07qwwpaN5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c85b5ed28f12128a7d036e53a4ed27a8_JaffaCakes118

Files

c85b5ed28f12128a7d036e53a4ed27a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

services
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE